Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c414df05-6440-337c-9c6c-517d94d49409.roa
File:                     c414df05-6440-337c-9c6c-517d94d49409.roa (raw, json)
Hash identifier:          ioDkyefnUm0+NOdkuL/V/2ZYmvUIPtjE28SZ0k6D3i8=
Subject key identifier:   B3:E6:B9:17:DD:B2:BB:96:B9:B8:73:B1:7F:F6:65:A3:E1:28:04:D1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D24E11FE78085BFC3478DEE40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c414df05-6440-337c-9c6c-517d94d49409.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        173.28.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:1f:e7:80:85:bf:c3:47:8d:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b4895e7f-7044-4c79-ab9c-70c7bdeb85dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:ad:bc:73:f0:ba:f4:94:42:5f:88:d9:4e:
                    c7:f6:20:2f:bf:ad:6e:34:8a:91:d6:47:c8:5c:6d:
                    63:44:27:ff:4b:9b:83:56:81:7e:9a:e9:57:00:05:
                    9f:5e:17:62:9e:89:2f:ba:14:59:3a:b3:13:5f:c4:
                    bf:0b:c3:3a:f6:94:62:3a:28:3a:0a:1b:fd:12:57:
                    05:fa:62:01:79:aa:77:28:be:cd:90:c6:00:22:41:
                    f8:39:74:70:8e:97:8c:77:9c:c8:71:73:73:73:97:
                    af:a6:d2:13:6e:be:66:6c:d1:48:fb:a3:a4:4a:bc:
                    4b:3b:fa:8c:ac:e4:e5:20:89:95:06:41:c6:44:76:
                    ff:bf:44:21:13:b9:35:b2:0f:44:41:06:6a:e9:c7:
                    a0:da:61:35:14:eb:78:50:11:0b:0d:e2:53:a3:64:
                    d8:25:d9:6a:72:39:83:58:1f:54:bd:b3:1b:80:05:
                    64:27:7e:67:e5:81:3c:d4:e9:b6:84:f5:29:05:6f:
                    9d:80:bf:d4:0d:e3:17:5d:99:7c:57:42:da:d4:92:
                    f1:6d:99:85:cc:4c:95:5f:e8:83:c3:df:d8:be:8f:
                    41:e6:7f:22:6f:d3:dc:65:4d:a7:7b:fd:ae:7f:73:
                    5e:f1:b8:b8:11:48:f6:0c:9a:ae:c5:da:fa:ff:cb:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E6:B9:17:DD:B2:BB:96:B9:B8:73:B1:7F:F6:65:A3:E1:28:04:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c414df05-6440-337c-9c6c-517d94d49409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.28.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:33:10:8d:13:66:91:a6:5b:5d:91:b8:a5:df:e4:7a:19:2f:
         4c:bb:34:4d:51:64:f9:b5:f2:c4:73:ef:1f:df:83:10:81:08:
         e4:4a:0a:a2:1f:5e:73:39:d4:fb:b2:3b:b9:13:ec:9f:1b:fe:
         b8:63:70:6a:32:23:91:3c:00:64:89:31:4e:e0:3d:a5:5c:7b:
         55:6c:56:90:41:bd:46:e6:a2:1a:fb:9d:86:59:11:ef:6b:83:
         4a:61:b7:9d:af:2e:e6:1f:2c:14:76:d8:43:1e:de:46:f4:f1:
         0c:1a:81:44:aa:46:53:d1:c1:f0:b1:51:c1:f5:0d:05:01:eb:
         32:19:ee:81:55:09:8a:5e:4d:f1:cf:25:16:56:f3:8e:50:d7:
         cb:08:9e:fb:f0:4c:7b:b7:70:61:9f:10:45:6c:d3:23:5c:5c:
         4e:3a:79:69:92:3a:07:ae:7f:76:8b:d2:d6:d4:25:00:a2:3e:
         41:be:f0:c5:1b:88:77:31:f9:2c:e8:11:ef:07:8d:e2:0e:04:
         09:6b:de:b1:12:45:2e:1e:b6:2f:bb:81:8e:fa:e3:99:ea:46:
         36:8a:50:a8:e1:4e:b9:ea:79:89:e9:fc:c0:d3:1a:b7:6a:3f:
         61:62:7d:2b:ec:67:f9:d2:ab:74:23:8d:46:95:1b:6d:61:f9:
         ac:a7:c1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:45 2026 by rpki-client